Skip to contentKamleshyadav vulnerabilities
Newest
- kamleshyadav handilyHandily <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary Stripe Payment Settings Modification via 'stripe_publishbale_key' ParameterCVE-2025-144875.3 Medium
- kamleshyadav pixelplayPixelPlay <= 1.0.2 - Missing Authorization to Unauthenticated Arbitrary API Key Deletion via 'clear_api_type' ParameterCVE-2025-144865.3 Medium
- kamleshyadav image buzzImage Buzz <= 1.0.3 - Missing Authorization to Unauthenticated Arbitrary API Key Modification via 'pixabay_api' ParameterCVE-2025-144845.3 Medium
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin plugin < 2.1.2 - SQL Injection vulnerabilityCVE-2026-325168.5 High
- kamleshyadav miraculousWordPress Miraculous theme < 2.1.2 - Broken Access Control vulnerabilityCVE-2026-325157.5 High
- kamleshyadav wp bakery autoresponder addonWordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Cross Site Scripting (XSS) vulnerabilityCVE-2026-273637.1 High
- kamleshyadav wp bakery autoresponder addonWordPress WP Bakery Autoresponder Addon plugin <= 1.0.6 - Broken Access Control vulnerabilityCVE-2026-273626.5 Medium
- kamleshyadav miraculous elementorWordPress Miraculous Elementor plugin <= 2.0.7 - Broken Authentication vulnerabilityCVE-2025-679988.8 High
- kamleshyadav videospirecore theme pluginVideospirecore Theme Plugin <= 1.0.6 - Authenticated (Subscriber+) Privilege Escalation via User Email Change/Account TakeoverCVE-2025-150968.8 High
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerabilityCVE-2025-490559.3 Critical
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin <= 2.5 - SQL Injection vulnerabilityCVE-2025-490508.5 High
- kamleshyadav medicalequipmentWordPress Medicalequipment theme <= 1.0.9 - Broken Access Control vulnerabilityCVE-2025-690095.3 Medium
- kamleshyadav miraculousWordPress Miraculous theme < 2.0.9 - Arbitrary Content Deletion vulnerabilityCVE-2025-586297.5 High
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin plugin < 2.0.9 - Insecure Direct Object References (IDOR) vulnerabilityCVE-2025-586279.8 Critical
- kamleshyadav cf7 auto responder addonWordPress CF7 Auto Responder Addon plugin <= 2.4 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-589617.1 High
- kamleshyadav rockon djWordPress RockON DJ theme <= 3.3 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2025-532297.1 High
- kamleshyadav miraculousWordPress Miraculous Theme < 2.0.9 - SQL Injection VulnerabilityCVE-2025-586289.3 Critical
- kamleshyadav exit intent popupWordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-586415.4 Medium
- kamleshyadav miraculous core pluginWordPress Miraculous Core Plugin Plugin <= 2.0.7 - Privilege Escalation VulnerabilityCVE-2025-49388Public exploit9.8 Critical
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin < 2.6 - Arbitrary Content Deletion vulnerabilityCVE-2025-314257.5 High
- kamleshyadav cf7 7 mailchimp add-onWordPress CF7 7 Mailchimp Add-on plugin < 2.4 - Broken Access Control VulnerabilityCVE-2025-290125.3 Medium
- kamleshyadav wp lead capturing pagesWordPress WP Lead Capturing Pages plugin < 2.6 - SQL Injection vulnerabilityCVE-2025-314249.3 Critical
- kamleshyadav pixel wordpress form builderplugin & autoresponderWordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.2 - SQL Injection VulnerabilityCVE-2025-319149.3 Critical
- kamleshyadav pixel wordpress form builderplugin & autoresponderWordPress Pixel Form BuilderPlugin & Autoresponder plugin <= 1.0.3 - Cross Site Request Forgery (CSRF) vulnerabilityCVE-2025-319155.4 Medium